Listing of Claims: 



1 . (Original) A system for providing an electronically secured web site of a • 
private network on the Internet, comprising: 

means for routing an external access request from the Internet to the web site 
and for limiting the extemal access request to the web site based on a type of the 
external access; 

means for providing an electronic wall between the Internet and the private 
network of the web site, for receiving the routed extemal access request from the 
means for routing and limiting, and for rejecting or passing the routed extemal access 
request; 

means for detecting the routed extemal access request and for determining 
whether the routed extemal access request is an attack on the private network of the 
web site; 

means for controlling a routing of the routed extemal access request within the 
private network to a particular area of the private network based on a location address 
of the particular area; and 

means for recording the routing of the routed extemal access request within 
the private network. 

2. (Original) The system of claim 1, wherein the means for detecting the 
routed extemal access request detects the routed extemal access request at the means 
for providing the electric wall. 

3. (Original) The system of claim 1, wherein the means for recording also 
provide recording of all events happening in the system. 

4. (Original) The system of claim 1, wherein the means for recording also 
provide recording of the routing of the extemal access request by the means for 
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routing and the receiving of the routed external access request at the means for 
providing an electronic wall. 

5. (Original) The system of claim 2, wherein the means for detecting and 
determining comprises first means for detecting the routed extemal access request 
prior to its receipt at the means for providing the electronic wall and second means for 
detecting the routed extemal access request after it is received and passed by the 
means for providing the electronic wall. 

6. (Original) The system of claim 1 , wherein the means for routing the 
extemal access request comprises: 

primary means for routing the extemal access request; and 
secondary means as backup for the primary means for routing extemal access 
request when the primary means for routing becomes unavailable. 

7. (Original) The system of claim 1 , wherein the means for providing the 
electronic wall comprises: 

primary means for providing the electronic wall; and 

secondary means for providing the electronic wall when the primary means for 
providing the electronic wall becomes unavailable. 

8. (Original) A system for providing security to a plurality of hosting sites on 
the Internet comprising: 

a first level of security that provides a first screening of requests from the 
Internet for access to the plurality of Internet hosting sites; 

a second level of security that detects and prevents unauthorized access to the 
plurality of Internet hosting sites by the access requests that are screened and passed 
by the first level of security; 
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a third level of security that provides a second screening of the access requests 
that are authorized by the second level of security; and 

a fourth level of security that provides recording of all events happening in the 
plurality of Internet hosting sites. 

9. (Original) The system of claim 8, wherein the first level of security 
comprises a plurality of routers that screen the access requests based on a type of each 
of the access requests and route the passed access requests to the second level of 
security. 

10. (Original) The system of claim 8, wherein the second level of security 
comprises a plurality of firewall systems, each associated with a corresponding one of 
the Internet hosting sites. 

11. (Original) The system of claim 10, fixrther comprising at least one load 
balancer for load balancing the passed access requests fi-om the first level of security 
across the plurality of firewall systems. 

12. (Original) The system of claim 10, wherein the second level of security 
further comprises an intrusion detection system (IDS) for detecting unauthorized 
entry of one of the passed access requests into at least one of the plurality of firewall 
systems; wherein the intrusion detection system comprises a first intrusion detection 
engine arranged in fi-ont of the at least one firewall system and a second intrusion 
detection engine arranged behind the at least one firewall system. 

13. (Original) The system of claim 10, wherein the second level of security 
fiirther comprises a plurality of IDS' s, each associated with a corresponding one of 
the plurality of firewall systems for detecting and preventing unauthorized entry of 
any one of the passed access requests into any one of the plurality of firewall systems. 
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14. (Original) The system of claim 8, wherein the third level of security 
comprises switches that manage sub-networks within a network for each of the 
Intemet hosting sites. 

15. (Original) The system of claim 14, wherein the switches maintain lists of 
addresses of the sub-networks and provide the second screening of the access requests 
authorized by the second level of security based on the lists of addresses. 

16. (Original) The system of claim 8, wherein the third level of security 
comprises at least one switch for a corresponding one of the Intemet hosting sites, 
wherein the at least one switch manages a plurality of sub-networks within a network 
of the corresponding Intemet hosting site. 

17. (Original) The system of claim 16, wherein the at least one switch 
maintains addresses of the sub-networks of the corresponding hosting site and 
provides the second screening based on the address list of any one the access requests 
authorized by the second level of security and routed to the corresponding hosting 
site. 

18. (Original) The system of claim 17, wherein the at least one switch 
comprises a two duplicate switches with a primary switch and a secondary switch, 
wherein the secondary switch provides backup to the primary switch. 

19. (Original) The method of claim 8, wherein the fourth level of security 
comprises an at least one event log manager maintained in a server that connects 
throughout a network of at least one of the plurality of Intemet hosting sites and 
records all events happening to the at least one Internet hosting site. 
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